OAuth2 and OpenID Connect Extension 2.30.1 Released

Last modified by Thomas Mortagne on 2026/11/13 20:56

Nov 13 2026

The OAuth2 and OpenID Connect extension 2.30.1 has been released.

Warning

This release can break existing OpenID Connect clients and access tokens: on wikis where the OpenID Connect provider was first installed before version 1.15, some existing consent access tokens are now rejected. Read the potential breakage section of the release notes before upgrading, to know how to get new tokens (or keep accepting the old ones).

This release brings the following changes:

  • Fixes the validation of access tokens, which could fail on XWiki 17.10.14+, 18.4.5+ and 18.8.0+
  • Rejects some existing consent access tokens on wikis where the OpenID Connect provider was first installed before version 1.15
  • Displays the consent warnings of the user profile "Applications" section in a more compact way
  • Upgrades to oauth2-oidc-sdk 11.39

Get Connected